Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/323830343a346230383a3a2f33322d313238203d3e20323637323739.roa
File:                     323830343a346230383a3a2f33322d313238203d3e20323637323739.roa (raw, json)
Hash identifier:          q7Wt5oq5H0Ca3v3HBn+IuUuAR493Xxl+kemPkk5A044=
Subject key identifier:   0B:10:EC:C8:E8:F6:AA:D0:4E:1C:ED:59:92:CB:C0:E0:EC:24:D3:2E
Certificate issuer:       /CN=6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4
Certificate serial:       E32B8ECC2DEB8CCDAF69B8937F7718D5DB9A7E
Authority key identifier: 6C:FF:DE:AA:D3:FF:B1:27:F9:41:EE:4A:91:42:3E:83:4E:A9:EE:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/323830343a346230383a3a2f33322d313238203d3e20323637323739.roa
Signing time:             Fri 30 Jan 2026 17:49:28 +0000
ROA not before:           Fri 30 Jan 2026 17:44:28 +0000
ROA not after:            Fri 29 Jan 2027 17:49:28 +0000
asID:                     267279
IP address blocks:        2804:4b08::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.crl
                          rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:2b:8e:cc:2d:eb:8c:cd:af:69:b8:93:7f:77:18:d5:db:9a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4
        Validity
            Not Before: Jan 30 17:44:28 2026 GMT
            Not After : Jan 29 17:49:28 2027 GMT
        Subject: CN=0B10ECC8E8F6AAD04E1CED5992CBC0E0EC24D32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:cd:80:fa:c9:d5:53:71:2a:ea:61:ee:a7:
                    76:bc:64:a4:2e:53:89:ef:66:a9:07:ca:26:d9:08:
                    89:c4:c7:a1:dc:7b:bf:d6:84:79:54:f7:5b:31:26:
                    54:43:58:ed:78:1b:44:1e:56:c2:16:e6:1a:e4:53:
                    f1:54:16:29:c7:05:30:5a:59:0d:e4:90:81:9e:a0:
                    d1:bf:3b:9d:2c:87:e4:e9:f6:57:f3:26:b6:57:25:
                    37:a3:2f:7d:d1:30:ac:6b:fc:23:a7:c6:d2:4e:67:
                    f3:5a:7a:c9:f3:71:06:a2:1d:98:a8:71:04:ee:d1:
                    fb:e6:c3:0e:c8:75:8b:55:bc:0e:fe:dd:aa:15:41:
                    9f:88:bf:23:b6:1a:8c:e7:0e:35:30:76:42:6c:85:
                    5e:fd:ef:e6:88:0e:be:cd:be:18:8e:55:93:e1:15:
                    d7:80:64:86:7f:37:b9:7c:3a:87:29:5c:27:4b:c6:
                    76:a9:cc:4f:8d:37:ef:cc:de:1e:fb:df:53:11:8c:
                    ae:ea:27:b0:cc:cb:42:ee:97:c1:c6:f4:ae:32:35:
                    dd:ec:74:62:21:eb:b7:ed:12:f9:39:a6:d2:21:4b:
                    3e:c9:5a:80:f5:e4:ff:16:98:4d:0f:18:2f:c4:8b:
                    c0:5e:d0:91:52:4a:fd:c8:e0:db:15:e8:9d:d4:42:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:10:EC:C8:E8:F6:AA:D0:4E:1C:ED:59:92:CB:C0:E0:EC:24:D3:2E
            X509v3 Authority Key Identifier:
                keyid:6C:FF:DE:AA:D3:FF:B1:27:F9:41:EE:4A:91:42:3E:83:4E:A9:EE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CFFDEAAD3FFB127F941EE4A91423E834EA9EEE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/323830343a346230383a3a2f33322d313238203d3e20323637323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b08::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:ea:ea:86:80:4c:49:d2:5b:a8:ee:42:ea:5a:da:09:6e:6f:
         54:ff:93:73:2a:ab:6e:4f:06:54:dd:52:da:20:2d:cb:c3:35:
         7e:ee:32:0f:72:45:70:d4:94:28:d6:81:7d:7b:0b:7a:02:8f:
         9d:1a:41:a2:60:b8:40:dc:4b:50:96:14:f5:e0:71:f9:34:9b:
         a7:2d:45:f3:c5:80:79:1b:a2:e1:72:1f:c8:75:f9:1b:53:fd:
         eb:11:19:59:35:05:21:fc:00:8e:26:8a:01:e7:78:5c:84:76:
         26:25:0f:0a:27:af:cb:35:f7:17:7b:1b:2c:62:94:29:51:f2:
         2c:d3:b1:f1:9c:6a:a7:02:dd:31:2c:bb:89:63:02:07:3d:93:
         10:04:c4:de:71:50:a1:62:8b:dd:ae:ea:0b:a4:b6:0e:66:1d:
         7e:96:07:44:3e:03:0b:93:9b:91:cb:ef:32:27:b5:0e:3b:d6:
         58:83:83:61:27:1b:bb:d9:09:bb:2d:ea:69:8b:86:3b:7e:4b:
         11:82:11:58:03:89:f5:fd:2e:b6:48:8c:f3:58:a1:f3:64:6e:
         e7:5e:60:cd:b5:9c:0a:ab:8e:88:e7:48:36:da:d9:17:8f:3d:
         bd:1c:da:3b:7b:c8:c5:37:de:e6:90:ba:e7:ff:ef:13:80:82:
         2b:40:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:49:59 2026 by rpki-client